Privacy Policy

Effective Date: March 1, 2026

Last Updated: March 1, 2026

Sonat LLC ("Sonat," "we," "us," or "our") operates the Numeroq platform (the "Service"), an AI-powered accounting and tax automation application available at numeroq.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By accessing or using Numeroq, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information provided through your Google account used for authentication, including:

  • Email address
  • Display name
  • Profile photo URL

1.2 Financial Data

When you connect your bank accounts or manually enter transactions, we collect:

  • Bank transaction details (dates, amounts, descriptions, merchant names)
  • Bank account identifiers and institution names
  • Transaction categories and tax classifications

1.3 Receipt and Document Data

When you upload or link receipts, we collect:

  • Receipt images and documents
  • Text extracted from receipts via optical character recognition (OCR), including merchant names, amounts, and dates
  • File metadata (file name, upload date)

1.4 Business Information

To provide tax categorization services, we may collect:

  • Business type (e.g., Schedule C or Schedule E)
  • Business description
  • Project names and settings
  • 1099 recipient information (names, email addresses, business details)

1.5 Technical and Diagnostic Data

When you submit a bug report, we may collect the following to diagnose and resolve issues:

  • Browser type and version (user agent)
  • Viewport dimensions and platform
  • Application error logs and network request failures
  • Screenshots of the application interface at the time of the report

1.6 Contact Information

When you use our contact form, we collect your name, email address, stated reason for contacting us, and your message.

1.7 Automatically Collected Information

We store a minimal amount of data locally in your browser (specifically, your currently selected project identifier) to improve your experience. We do not use tracking cookies, advertising cookies, or third-party analytics services.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Numeroq platform
  • Authenticate your identity and manage your account
  • Connect to your bank accounts and retrieve transaction data
  • Automatically categorize transactions into IRS tax categories using AI
  • Analyze and extract data from uploaded receipts
  • Match receipts to corresponding transactions
  • Generate and export financial reports (e.g., to Google Sheets)
  • Send transactional emails (e.g., W-9 requests to your 1099 recipients)
  • Respond to your inquiries and support requests
  • Diagnose technical issues and improve application stability
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share your data only with the following categories of third-party service providers, solely to operate and deliver the Service:

3.1 Authentication

Google Firebase Authentication: We use Firebase Authentication to manage sign-in. Your email and profile information are processed by Google in accordance with Google's Privacy Policy.

3.2 Bank Data

Plaid: We use Plaid to connect to your bank accounts and retrieve transaction data. Plaid processes your banking credentials and financial data in accordance with Plaid's Privacy Policy. We never see or store your bank login credentials.

3.3 AI Processing

OpenAI: We use OpenAI's API to categorize transactions and extract information from receipts. Transaction details and receipt text are sent to OpenAI for processing. Files sent to OpenAI are deleted from their servers immediately after processing. OpenAI's use of data is governed by OpenAI's Privacy Policy.

3.4 Cloud Storage and Database

Google Firebase (Firestore and Storage): Your account data, transactions, receipts, and application data are stored in Google Cloud Firestore. Bug report screenshots are temporarily stored in Firebase Storage.

3.5 Document Storage

Google Drive: Receipt images and documents may be stored in Google Drive folders that you designate.

3.6 Reporting

Google Sheets: When you export data, your categorized transaction details are written to Google Sheets in your account.

3.7 Email

Amazon Web Services (AWS SES): We use AWS Simple Email Service to send transactional emails such as W-9 requests. Recipient names, email addresses, and relevant business details are shared with AWS for delivery purposes only.

3.8 Support and Bug Reports

GitHub: Bug reports and contact form submissions are stored as issues in a private GitHub repository for our internal tracking. These submissions may include your name, email, and diagnostic information.

3.9 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service to you. If you request deletion of your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Financial data and transaction records may be retained for up to seven (7) years after account deletion to comply with tax recordkeeping requirements, unless you specifically request earlier deletion and no legal obligation prevents it.

5. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

  • Encrypted data transmission using HTTPS/TLS
  • Authentication via secure OAuth 2.0 tokens
  • Role-based access controls for project data
  • Secure cloud infrastructure provided by Google Cloud Platform

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your personal information, subject to legal retention requirements
  • Export your data in a portable format (e.g., via Google Sheets export)
  • Withdraw consent for data processing where consent is the legal basis
  • Disconnect your bank accounts at any time through the application

To exercise any of these rights, please contact us at [email protected].

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to opt out of the sale of personal information — we do not sell your personal information
  • The right to non-discrimination for exercising your privacy rights

To submit a request, email us at [email protected] with the subject line "CCPA Request."

8. Children's Privacy

Numeroq is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and third-party service providers are located. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.

10. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: